rundll32
Static task
static1
Behavioral task
behavioral1
Sample
39670663ac1371400e4ec69724c1fd046087a85882cbd50976f7bfd66d9b2c6f.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
39670663ac1371400e4ec69724c1fd046087a85882cbd50976f7bfd66d9b2c6f.dll
Resource
win10v2004-20240508-en
General
-
Target
39670663ac1371400e4ec69724c1fd046087a85882cbd50976f7bfd66d9b2c6f
-
Size
7KB
-
MD5
64164ecf3a99fe4e66db555535ba8ea3
-
SHA1
a818a0c4c294397864b257129350dcd1942dcabe
-
SHA256
39670663ac1371400e4ec69724c1fd046087a85882cbd50976f7bfd66d9b2c6f
-
SHA512
a03ada17f4aaaf941f44980280960864a172cf972ae6fb381e686d3825a2a4ab6e9b6e4f3f24e58a05bb63603430ef37e62d04777c3de595e48d439b7e962fb2
-
SSDEEP
192:unSR6bgY17EqY10vhqEANxSIawTDTc0Eeztx:uZ1pY10vhqE6xSI/7c0Ht
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39670663ac1371400e4ec69724c1fd046087a85882cbd50976f7bfd66d9b2c6f
Files
-
39670663ac1371400e4ec69724c1fd046087a85882cbd50976f7bfd66d9b2c6f.dll windows:5 windows x86 arch:x86
33eb74cdd77dab1b168bbaa130115a9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
LoadLibraryW
user32
PostMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 503B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ